收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 电脑中毒了，下载者
12
返回列表 发新帖
楼主: snoopy2004
 收起左侧

[病毒样本] 电脑中毒了，下载者

[复制链接]
BING126
头像被屏蔽
发表于 2008-7-17 19:46:43 | 显示全部楼层
McAfee 只报了8个
回复

举报

尽在不言中
发表于 2008-7-18 07:57:25 | 显示全部楼层

回复 1楼 snoopy2004 的帖子

无法识别的..已上传卡巴分析
回复

举报

hahacomcn
发表于 2008-7-18 12:02:46 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\system32.rar'
C:\Documents and Settings\haha\桌面\system32.rar
    [0] Archive type: RAR
    --> hhrdxd.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> mtewdh.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> rfdswc.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> sgdewg.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> tdffdl.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> zycdex.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> cxdh3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> dgje7.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> dybd1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> esoc3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> oclv14.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> qmtx6.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> scwa13.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> tdkq8.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> tlay9.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> tsro5.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> ttsa12.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> upfu15.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> uzcq11.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> ypbc10.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> zamq4.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48f31633.qua'  ( QUARANTINE )
    [NOTE]      Attempting to perform action using the ARK lib.
    [NOTE]      A backup was created as '4fa761f4.qua'  ( QUARANTINE )


End of the scan: 2008年7月18日  12:02
Used time: 00:05 Minute(s)

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     21 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
回复

举报

hahacomcn
发表于 2008-7-18 12:03:25 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\WINDOWS.rar'
C:\Documents and Settings\haha\桌面\WINDOWS.rar
    [0] Archive type: RAR
      --> avur.exe
          [DETECTION] Is the TR/Downloader.Gen Trojan
      --> ciiq.exe
          [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      A backup was created as '48ce1630.qua'  ( QUARANTINE )
    [NOTE]      Attempting to perform action using the ARK lib.
    [NOTE]      A backup was created as '4fb36049.qua'  ( QUARANTINE )
回复

举报

IllusionWing
发表于 2008-7-18 12:10:35 | 显示全部楼层
下载器all killed
SYSTEM32杀21个

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

小邪邪
发表于 2008-7-18 12:37:35 | 显示全部楼层
原帖由 BING126 于 2008-7-17 19:46 发表
McAfee 只报了8个



俺的mcafee实打实的报了23个啊

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

jiffy
发表于 2008-7-18 16:11:38 | 显示全部楼层
PRODNAME1
PRODNAME2
访问被拒绝
找不到所请求的 URL

在尝试检索 URL 时:

http://bbs.kafan.cn/attachment.php?aid=
310921&k=93d57f49f3d1158da22eab6445ec017
9&t=1216368682

遇到了下列错误:

所请求的对象已被感染了下列病毒: Trojan-GameThief.Win32.OnLineGames.rxwb


如果您认为这是不正确的,请联系您的服务提供商。
生成于:
Fri Jul 18 16:11:22 2008
Kaspersky Anti-Virus 2009
回复

举报

舞动柱头
发表于 2008-7-18 16:27:43 | 显示全部楼层
NOD32宰了２３个
回复

举报

cosly222
发表于 2008-7-18 19:56:29 | 显示全部楼层
小红伞监控干掉23个。
2008-07-18 19:45:37 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Downloader.Gen] /home/zz/Downloads/attachment.php_FILES/avur.exe <<< Is the Trojan horse TR/Downloader.Gen
2008-07-18 19:45:37 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment.php_FILES/avur.exe to /home/zz/.AntiVir/2FAD8626.9D7.
2008-07-18 19:45:38 zz-desktop antivir[4728]: AVGU: ALERT AntiVir ALERT: [TR/Downloader.Gen] /home/zz/Downloads/ciiq.exe <<< Is the Trojan horse TR/Downloader.Gen
2008-07-18 19:45:38 zz-desktop antivir[4728]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/ciiq.exe to /home/zz/.AntiVir/37D2C5FF.FB9.
2008-07-18 19:45:45 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/sgdewg.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:45 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/sgdewg.dll to /home/zz/.AntiVir/4B809543.BF9.
2008-07-18 19:45:45 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/dybd1.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:45 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/dybd1.exe to /home/zz/.AntiVir/0C537655.241.
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/tdkq8.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/tdkq8.exe to /home/zz/.AntiVir/2D00A3DE.20D.
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/hhrdxd.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/hhrdxd.dll to /home/zz/.AntiVir/690BB6C4.7E8.
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/tsro5.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/tsro5.exe to /home/zz/.AntiVir/78FC5A19.B5A.
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/zycdex.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/zycdex.dll to /home/zz/.AntiVir/43A30C7D.A28.
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/qmtx6.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:46 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/qmtx6.exe to /home/zz/.AntiVir/25E72347.F7B.
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/cxdh3.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/cxdh3.exe to /home/zz/.AntiVir/3BBDB051.24F.
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/ttsa12.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/ttsa12.exe to /home/zz/.AntiVir/71C6997D.E5D.
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/rfdswc.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/rfdswc.dll to /home/zz/.AntiVir/189B944E.7D3.
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/ypbc10.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:47 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/ypbc10.exe to /home/zz/.AntiVir/3B76A060.6E7.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/upfu15.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/upfu15.exe to /home/zz/.AntiVir/101248AB.56D.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/dgje7.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/dgje7.exe to /home/zz/.AntiVir/03D47D8D.FFD.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/tlay9.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/tlay9.exe to /home/zz/.AntiVir/1E5F49D5.FC3.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/uzcq11.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/uzcq11.exe to /home/zz/.AntiVir/131D1F7C.3B3.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/scwa13.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/scwa13.exe to /home/zz/.AntiVir/3898BFAC.FD4.
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/tdffdl.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:48 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/tdffdl.dll to /home/zz/.AntiVir/5DE30216.4BF.
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/esoc3.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/esoc3.exe to /home/zz/.AntiVir/4C6746CD.601.
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Spy.Gen] /home/zz/Downloads/attachment(1).php_FILES/mtewdh.dll <<< Is the Trojan horse TR/Spy.Gen
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/mtewdh.dll to /home/zz/.AntiVir/72927DE9.5F4.
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/oclv14.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/oclv14.exe to /home/zz/.AntiVir/6076114F.D91.
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: ALERT AntiVir ALERT: [TR/Dropper.Gen] /home/zz/Downloads/attachment(1).php_FILES/zamq4.exe <<< Is the Trojan horse TR/Dropper.Gen
2008-07-18 19:45:49 zz-desktop antivir[4726]: AVGU: INFO The concerning file has been moved from /home/zz/Downloads/attachment(1).php_FILES/zamq4.exe to /home/zz/.AntiVir/1A77A7B9.802.

[ 本帖最后由 cosly222 于 2008-7-18 19:58 编辑 ]
回复

举报

尽在不言中
发表于 2008-7-22 02:11:29 | 显示全部楼层

回复 1楼 snoopy2004 的帖子

再次上传卡巴无法识别。
回复

举报

12
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-6 21:49 , Processed in 0.094656 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表